<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:dt="uuid:C2F41010-65B3-11d1-A29F-00AA00C14882" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=us-ascii">
<meta name="Generator" content="Microsoft Word 14 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
text-align:right;
direction:rtl;
unicode-bidi:embed;
font-size:11.0pt;
font-family:"Calibri","sans-serif";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.MsoAcetate, li.MsoAcetate, div.MsoAcetate
{mso-style-priority:99;
mso-style-link:"Balloon Text Char";
margin:0cm;
margin-bottom:.0001pt;
text-align:right;
direction:rtl;
unicode-bidi:embed;
font-size:8.0pt;
font-family:"Tahoma","sans-serif";}
span.EmailStyle17
{mso-style-type:personal-compose;
font-family:"Calibri","sans-serif";
color:windowtext;}
span.BalloonTextChar
{mso-style-name:"Balloon Text Char";
mso-style-priority:99;
mso-style-link:"Balloon Text";
font-family:"Tahoma","sans-serif";}
.MsoChpDefault
{mso-style-type:export-only;
font-family:"Calibri","sans-serif";}
@page WordSection1
{size:612.0pt 792.0pt;
margin:72.0pt 90.0pt 72.0pt 90.0pt;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">Hi,<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR"><o:p> </o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">I'm trying to configure Dynamic IPsec between Strongswan and Juniper MX with MS Card but with no success the following is the Juniper configuration and Strongswan's -ipsec.conf
<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span lang="HE" style="font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">Juniper:<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">set services service-set IPSEC-CLIENT-SERVICE-SET next-hop-service inside-service-interface ms-0/2/0.1<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">set services service-set IPSEC-CLIENT-SERVICE-SET next-hop-service outside-service-interface ms-0/2/0.2<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">set services service-set IPSEC-CLIENT-SERVICE-SET ipsec-vpn-options local-gateway 10.7.7.2 <<<< interface connecting to the internet</span><span dir="RTL"></span><span style="font-family:"Arial","sans-serif""><span dir="RTL"></span>
</span><span dir="LTR"><o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">set services service-set IPSEC-CLIENT-SERVICE-SET ipsec-vpn-options ike-access-profile IPSEC-CLIENTS-GROUP-1<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">set services ipsec-vpn ipsec proposal DYNAMIC_IPSEC_PROPOSAL protocol esp<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">set services ipsec-vpn ipsec proposal DYNAMIC_IPSEC_PROPOSAL authentication-algorithm hmac-sha1-96<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">set services ipsec-vpn ipsec proposal DYNAMIC_IPSEC_PROPOSAL encryption-algorithm aes-256-cbc</span><span dir="RTL"></span><span lang="HE" style="font-family:"Arial","sans-serif""><span dir="RTL"></span>
</span><span dir="LTR"><o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">set services ipsec-vpn ipsec policy DYNAMIC_IPSEC_POLICY perfect-forward-secrecy keys group2<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">set services ipsec-vpn ipsec policy DYNAMIC_IPSEC_POLICY proposals DYNAMIC_IPSEC_PROPOSAL<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">set services ipsec-vpn ike proposal IKE-PHASE1-PROPOSAL authentication-method pre-shared-keys<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">set services ipsec-vpn ike proposal IKE-PHASE1-PROPOSAL dh-group group2<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">set services ipsec-vpn ike proposal IKE-PHASE1-PROPOSAL authentication-algorithm sha-256<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">set services ipsec-vpn ike proposal IKE-PHASE1-PROPOSAL encryption-algorithm aes-256-cbc<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">set services ipsec-vpn ike proposal IKE-PHASE1-PROPOSAL lifetime-seconds 28800<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">set services ipsec-vpn ike policy IKE-PHASE1-POLICY mode main<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">set services ipsec-vpn ike policy IKE-PHASE1-POLICY proposals IKE-PHASE1-PROPOSAL<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">set services ipsec-vpn ike policy IKE-PHASE1-POLICY pre-shared-key ascii-text "$9$IaNES"<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">set interfaces xe-0/0/0 unit 0 family inet address 172.16.1.1/24 <<<<< connecting to LAN<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">set interfaces ms-0/2/0 unit 0 family inet<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">set interfaces ms-0/2/0 unit 1 dial-options ipsec-interface-id IPSEC-INTERFACE-ID<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">set interfaces ms-0/2/0 unit 1 dial-options shared<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">set interfaces ms-0/2/0 unit 1 family inet<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">set interfaces ms-0/2/0 unit 1 service-domain inside<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">set interfaces ms-0/2/0 unit 2 family inet<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">set interfaces ms-0/2/0 unit 2 service-domain outside<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">set interfaces ge-1/0/0 unit 0 family inet address 10.7.7.2/30 <<<<< interface connecting to the internet</span><span dir="RTL"></span><span lang="HE" style="font-family:"Arial","sans-serif""><span dir="RTL"></span>.
</span><span dir="LTR"><o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">set routing-options static route 172.16.2.0/24 next-hop ms-0/2/0.1 <<<< directing traffic going to the other LAN into the interface for encryption<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">set access profile IPSEC-CLIENTS-GROUP-1 client * ike allowed-proxy-pair local 172.16.1.0/24 remote 172.16.2.0/24 <<< interesting traffic, our LAN and peer’s LAN<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">set access profile IPSEC-CLIENTS-GROUP-1 client * ike ike-policy IKE-PHASE1-POLICY</span><span lang="HE" style="font-family:"Arial","sans-serif""><o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">set access profile IPSEC-CLIENTS-GROUP-1 client * ike interface-id IPSEC-INTERFACE-ID<o:p></o:p></span></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<o:p> </o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
Strongswan ipsec.conf:<o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
config setup<o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span> #
</span>strictcrlpolicy=yes<o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span> #
</span>uniqueids = no<o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
conn %default<o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span>
</span>ikelifetime=1d<o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span>
</span>keylife=20m<o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span>
</span>rekeymargin=3m<o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span>
</span>keyingtries=1<o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span>
</span>keyexchange=ikev2<o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span>
</span>authby=secret<o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span>
</span>type=tunnel<o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span>
</span>reauth=no<o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span>#
</span>auth=esp<o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span>#
</span>esp=null-sha1<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span>!</span><o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span>#
</span>esp=aes256-sha256<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span>!</span><o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span>
</span>ike=aes128-sha1-modp1024<o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span>
</span>rekey=no<o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span> #</span>lifetime=5h<o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span>
</span>mobike=no<o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span> #</span>dpdaction=hold<o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span>
</span>dpdaction=clear<o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span>
</span>dpddelay=20s<o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
conn test<o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span>
</span>left=%defaultroute<o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span>
</span>leftsubnet=172.16.1.0/24[gre<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span>]</span><o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span>
</span>leftid=@TE<o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span>#
</span>leftfirewall=yes<span dir="RTL"></span><span dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span>
<span lang="HE"># </span></span><o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span> </span>right=14.90.19.22 << internet - static ip<o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span>
</span>rightsubnet=172.16.2.0/24[gre<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span>]</span><o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<span dir="RTL"></span><span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span>
</span>rightid=@LNS-Juniper<span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""><o:p></o:p></span></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<span lang="HE" dir="RTL" style="font-family:"Arial","sans-serif""> </span>auto=add<o:p></o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<o:p> </o:p></p>
<p class="MsoNormal" align="right" style="text-align:right;direction:ltr;unicode-bidi:embed">
<o:p> </o:p></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">Log on Linux-strongswan:<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR"><o:p> </o:p></span></p>
<p class="MsoNormal" style="text-align:left;direction:ltr;unicode-bidi:embed">02[IKE] initiating IKE_SA mrv[1] to 14.90.19.22<o:p></o:p></p>
<p class="MsoNormal" style="text-align:left;direction:ltr;unicode-bidi:embed">generating IKE_SA_INIT request 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) N(HASH_ALG) ]<o:p></o:p></p>
<p class="MsoNormal" style="text-align:left;direction:ltr;unicode-bidi:embed">sending packet: from 99.3.3.13[500] to 14.90.19.22[500] (956 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="text-align:left;direction:ltr;unicode-bidi:embed">received packet: from 14.90.19.22[500] to 99.3.3.13[500] (380 bytes)<o:p></o:p></p>
<p class="MsoNormal" style="text-align:left;direction:ltr;unicode-bidi:embed">parsed IKE_SA_INIT response 0 [ SA KE No N(NATD_S_IP) N(NATD_D_IP) V V V V ]<o:p></o:p></p>
<p class="MsoNormal" style="text-align:left;direction:ltr;unicode-bidi:embed">received unknown vendor ID: 4a:13:1c:81:07:03:58:45:5c:57:28:f2:0e:95:45:2f<o:p></o:p></p>
<p class="MsoNormal" style="text-align:left;direction:ltr;unicode-bidi:embed">received unknown vendor ID: 7d:94:19:a6:53:10:ca:6f:2c:17:9d:92:15:52:9d:56generating IKE_AUTH request 1 [ IDi N(INIT_CONTACT) IDr AUTH SA TSi TSr N(EAP_ONLY<span dir="RTL"></span><span dir="RTL" style="font-family:"Arial","sans-serif""><span dir="RTL"></span>
</span><o:p></o:p></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">sending packet: from 99.3.3.13[500] to 14.90.19.22 [500] (356 bytes<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">received packet: from 14.90.19.22 [500] to 99.3.3.13 [500] (36 bytes</span><span lang="HE" style="font-family:"Arial","sans-serif""><o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">payload type NOTIFY was not encrypted<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">could not decrypt payloads<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">integrity check failed<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">04[IKE] IKE_AUTH response with message ID 1 processing failed<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span lang="HE" style="font-family:"Arial","sans-serif""><o:p> </o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">Please Help!<o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">Cheers</span><span lang="HE" style="font-family:"Arial","sans-serif""><o:p></o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR"><o:p> </o:p></span></p>
<p class="MsoNormal" align="right" dir="RTL" style="text-align:left"><span dir="LTR">Yaniv.
<o:p></o:p></span></p>
</div>
<a href="http://mrv.com/contact-mrv-communications/?interest=Subscribe%20to%20Newsletter"><img src="http://50.57.127.206/images/Banner.jpg" alt="E-Banner"></a><br>
<br>
<div style="background-color:#FFFFFF; padding:.8em; ">
<p style="font-size:10pt;color:#b8b9c8; line-height:8pt; font-family:
'arial','times roman',serif;">
MRV Communications is a global supplier of packet and optical solutions that power the world’s largest networks. Our products combine innovative hardware with intelligent software to make networks smarter, faster and more efficient.</p>
</div>
<br>
<div style="background-color:#FFFFFF; padding:.8em; ">
<p style="font-size:8pt;color:#b8b9c8; line-height:8pt; font-family:
'arial','times roman',serif;">
The contents of this message, together with any attachments, are intended only for the use of the person(s) to whom they are addressed and may contain confidential and/or privileged information. If you are not the intended recipient, immediately advise the
sender, delete this message and any attachments and note that any distribution, or copying of this message, or any attachment, is prohibited.</p>
</div>
</body>
</html>